Document Retention Policy NJ Businesses
Reviewed October 13, 2026. General planning guidance, not legal advice or a record-specific retention schedule.
A useful document retention policy tells your New Jersey business what to keep, who is responsible, and when a record can move into an approved destruction batch. It should cover paper files, scanned copies, email, business applications and backups—not just the boxes occupying a storage room.
The goal is consistent decision-making, not automatic shredding on a birthday. Before arranging destruction, confirm the applicable retention requirement, any continuing business need and any preservation hold. NJ Shredding can discuss the paper-destruction service; your organization’s authorized records owner and advisers should decide which records are eligible.
Why a blanket seven-year rule is not enough
Different records have different rules and different starting dates. “Keep everything seven years” can destroy some records too soon while retaining others longer than necessary.
- Tax records: The IRS recordkeeping guide identifies several periods and exceptions. It also says to check nontax requirements before discarding records. Our IRS retention guide explains those distinctions.
- Employment records: EEOC guidance describes different requirements for personnel records, payroll and benefit plans under the laws it administers. A discrimination charge creates additional preservation duties. Those federal requirements are not a complete New Jersey employment-record schedule.
- Patient records: HHS explains that the HIPAA Privacy Rule does not set medical-record retention periods; state laws generally govern them. Do not confuse patient records with HIPAA-required compliance documentation. See our HIPAA shredding requirements guide.
Contracts, insurance files, corporate records and regulated financial records need their own review. Have the appropriate legal, accounting, HR or clinical adviser confirm the rule and its scope rather than borrowing a period from an unrelated industry.
Build a retention schedule people can actually use
Start with an inventory organized by record series: groups of records serving the same function. Identify the authoritative copy and any duplicates. Assign a responsible department, then document the requirements that apply to that series.
| Schedule field | What to record | Why it matters |
|---|---|---|
| Record series and owner | Clear description, responsible role and storage locations | Employees know which policy entry applies |
| Retention basis | Applicable authority, contract or approved business need | The period has a documented reason |
| Starting event | For example, filing, payment, contract closure or another verified trigger | Age alone may not start the retention clock |
| Period and exceptions | Approved duration, special circumstances and review date | Exceptions are checked before disposal |
| Hold and release controls | Who checks holds and authorizes destruction | A scheduled purge cannot override preservation |
| Disposition method | Paper destruction or an approved electronic-data process | The method matches the record and media |
This is a policy-design template, not a legal schedule. Train staff on it, control access to retained records and review it when regulations, contracts, systems or business activities change. A written policy alone does not establish compliance.
Closing your business? Use our business-closing records guide to plan post-closure custody and separate retained files from an authorized destruction batch before leaving the premises.
Put preservation holds ahead of routine disposal
Create a way to suspend destruction promptly when a dispute, investigation, audit or other preservation issue arises. Seek counsel’s direction when litigation is anticipated; do not wait for a shredding appointment to ask whether affected records must be preserved.
For a concrete example, EEOC guidance says that records relating to a filed charge must be kept until final disposition of the charge or a resulting lawsuit. Expiration of an ordinary retention period does not override that instruction.
- Notify the relevant employees, records owner and IT staff of the hold’s scope.
- Keep held records out of destruction containers and pause affected automated deletion.
- Track the hold separately from the ordinary retention schedule.
- Require an authorized release and a fresh eligibility check before destruction resumes.
Approve a destruction batch before collection
For each purge, list the record series, date range, storage location, estimated quantity and approving person. Confirm retention has ended, check for holds and separate any uncertain files for review. Use box or batch identifiers instead of putting customer names or sensitive details on exposed labels.
New Jersey’s Identity Theft Prevention Act, section 11 (N.J.S.A. 56:8-162), addresses customer records containing personal information that are no longer to be retained. It requires destruction or arranged destruction that makes the information unreadable, undecipherable or nonreconstructable through generally available means. This longstanding provision does not supply a universal retention period.
Public agencies have a separate approval process: NJ Treasury requires prior written authorization for disposal of public records, regardless of medium. A private-business schedule or vendor receipt is not a substitute.
Match paper and digital disposal to the approved plan
Keep approved paper secure until handoff. Compare one-time purges with recurring collection, and on-site visibility with off-site processing, through our paper shredding services. Confirm container arrangements, preparation requirements, access and documentation before collection. A recurring pickup is not permission to discard every old file.
Shredding paper does not remove scans, email attachments, cloud copies or backups. IT should manage those stores under the same retention and hold decisions. For retired data-bearing media, NIST SP 800-88 Revision 2, finalized September 26, 2025, supersedes Revision 1 and provides current media-sanitization program guidance. Choose applicable controls for the media and information sensitivity; recycling hardware alone does not confirm sanitization.
After destruction, reconcile the approved batch with the service documentation and retain an internal disposition log. Ask what the destruction certificate or receipt covers. It can document the service performed, but cannot prove your retention decision was legally correct or that every digital copy was removed.
Frequently asked questions
Does scanning a document mean we can shred the original?
Not automatically. Check whether the applicable requirement permits an electronic replacement and whether the scan is complete, accurate, accessible and protected. Resolve original-document requirements and holds before approving paper destruction.
Should shredding happen weekly or annually?
Choose frequency around approved volume, secure storage capacity and operational needs. Neither schedule replaces record-by-record eligibility controls.
Request a quote for approved records
Call (201) 371-5900 or request a quote. Share your New Jersey location, approximate boxes or containers, access conditions, preferred service mode and documentation needs—not the records themselves. Confirm address availability and scheduling with the team. Complete retention and hold review before collection.
